What sources does Taxxa search?

Taxxa searches a continuously updated collection of more than one million pages from tax authorities, government publications, legislation and case law across the European jurisdictions it covers. Every response cites the underlying material, so a professional can inspect the rule, its jurisdiction and whether it is current before relying on the result.

Can Taxxa work with a team’s own documents?

Yes. Research can combine the public knowledge base with a team’s own PDF, DOCX, CSV and TXT files in one workspace. That makes it possible to compare a client document with the relevant guidance, trace a conclusion to its source and prepare a draft without losing the evidence that supports it.

Who is Taxxa built for?

Accountants, auditors, tax advisors, payroll specialists, bookkeepers and advisory teams working across European jurisdictions. Shared workspaces keep research available to colleagues, and citations make review easier.

Where is customer data stored, and is it used to train models?

Customer data stays in the European Union and is never used to train language models.

Does Taxxa replace professional judgement?

No. Taxxa is a research and drafting workspace. It helps professionals reach an informed starting point faster; the professional still reviews the evidence and makes the final decision. It does not file returns, post bookkeeping entries or give legal advice.

IT, Cybersecurity & Data news

Thursday, 15 October 2026

Regulatory changes detected daily from official sources across Europe. Create a free account to follow your jurisdictions and ask Taxxa what a change means in practice.

AI Regulation & Algorithmic AccountabilityDenmarkRetsinformation6 days ago

Denmark retables AI Act with fines, market powers, registration duty

Bill L 3 replaces the 2025 AI Act: Digitaliseringsstyrelsen becomes the contact point, safety-component AI must register, and breaches carry fines.

Industry: Across industries

Data Protection & Privacy Regulations (GDPR)NorwayRevisorforeningen1 week ago

Finanstilsynet seeks power for fully automated decisions on auditors

New § 6-5 in the finanstilsynsloven would let the supervisor decide cases by automation alone and new § 6-6 would let it test IT systems on real personal data; hearing responses are due 6 October 2026.

Industry: Accounting, bookkeeping and auditing activities; tax consultancy

Data Protection & Privacy Regulations (GDPR)DenmarkDatatilsynet2 weeks ago

Datatilsynet: TIA required before SCC/BCR transfers, not for adequacy ones

Datatilsynet: adequacy-country transfers need no further exporter measures, while Article 46 SCC/BCR transfers require a prior TIA, aided by the CNIL guide and EDPS checklist.

Industry: Across industries

Digital Operational Resilience (DORA)EstoniaFinantsinspektsioon2 weeks ago4 documents

Estonia sets 2026 year-end DORA register round, adds TIBER-EE testing guide

The DORA information-register round is collected in early 2027 as of 31 December 2026, and a new section sets threat-led testing under the TIBER-EE national guide.

Industry: Financial and insurance activities

Cloud Computing & Data Sovereignty RulesFranceLégifrance3 weeks ago

Health-data hosting locked to EU/EEA with transfer map duty

Hosted health-data storage must sit exclusively in the EU/EEA, contracts gain compelled-transfer disclosure clauses, and hosts must publish a live map of third-country transfers and remote access.

Industry: Data processing, hosting and related activities

Electronic Records & Digital Evidence StandardsFranceLégifrance3 weeks ago

Polynesian communes shift accounting chain to paperless PES v2 exchanges

Polynesian communes go paperless on PES v2+: three signature options, probative electronic data, and a tripartite convention with suspension fallbacks.

Industry: Across industries

Digital Operational Resilience (DORA)EstoniaFinantsinspektsioon3 weeks ago

Estonia adopts TIBER-EE framework for threat-led penetration tests

Finantsinspektsioon's recommended TIBER-EE guide in force since 15 September 2026 sets the national playbook for DORA threat-led penetration testing, with voluntary use subject to prior coordination.

Industry: Financial and insurance activities

Data Protection & Privacy Regulations (GDPR)European UnionEUR-Lex4 weeks ago

AG: unnamed 'partners' consent cannot support direct marketing

Advocate General Spielmann opines in Case C-317/25 that ISP 'partners' consent cannot support Groupe Canal +'s marketing without fresh consent, proposing the Court answer the first question accordingly.

Industry: Across industries

Digital Operational Resilience (DORA)GermanyRechtsprechung des Bundes1 month ago3 documents

Auditors must now test DORA ICT resilience at securities firms

BaFin ordinance of 26 August 2026 (BGBl I Nr. 256) extends the audit report to DORA ICT duties for Wertpapierinstitute and crowdfunding providers, first for years starting after 31 Dec 2024.

Industry: Legal and accounting activities · Other financial service activities, except insurance and pension funding n.e.c. · Other activities auxiliary to financial services, except insurance and pension funding

Digital Operational Resilience (DORA)NorwayFinanstilsynet1 month ago

DORA replaces Norway’s ICT rules for additional financial firms

From 1 September 2026, financing, debt-collection and estate-agency firms face adapted DORA requirements. The supervisor specifies temporary incident-reporting channels.

Industry: Activities of collection agencies and credit bureaus · Real estate agencies · Other credit granting · Non-life insurance

Cybersecurity Laws & NIS2 FrameworkEstoniaRiigi Teataja1 month ago

Estonia replaces its information-security standard from 1 September

The new regulation preserves compatible existing security measures and allows pre-existing compliance documentation to remain valid for up to three years.

Data Protection & Privacy Regulations (GDPR)FinlandFinlex2 months ago

Sanoma must obtain consent for personalisation cookies and certain web calls

KHO upheld the consent order. Visiting a news site did not amount to expressly requesting content personalised through tracking and analysis.

Industry: Across industries

Data Protection & Privacy Regulations (GDPR)FinlandFinlex2 months ago

Otavamedia must offer cookie refusal on the first consent screen

The design steered users towards acceptance. Following IAB Europe’s TCF standard did not prove compliance with cookie rules.

Industry: Across industries

Data Protection & Privacy Regulations (GDPR)SwedenRegeringskansliets rättsdatabaser2 months ago

Outsourcing secrecy law adds non-consensual social-service interventions

From 2 January 2027, the scope includes partly publicly funded private activities under Lag (2026:1637); the duty covers technical processing and storage, including subcontractors.

Industry: Other social work activities without accommodation n.e.c. · Human health activities · Education